Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: lYe3Y2eaUzA/LhUlTX85D8mOgGrN4fGhXde7qItyA88=
Subject key identifier: 5F:4E:10:F1:65:F0:8C:A9:49:AA:CF:2C:CB:F9:62:C3:FA:AF:61:0F
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019FAC7596CD33D875D8931799C75C7339B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 043A
Signing time: Wed 29 Jul 2026 06:00:15 +0000
Manifest this update: Wed 29 Jul 2026 06:00:15 +0000
Manifest next update: Thu 30 Jul 2026 06:00:15 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: GXyKY5u/ZZiQCUpIXfYIYY26+FOeJOF2OmMTIdcprPw=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:96:cd:33:d8:75:d8:93:17:99:c7:5c:73:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jul 29 06:00:15 2026 GMT
Not After : Jul 30 06:00:15 2026 GMT
Subject: CN=5f4e10f165f08ca949aacf2ccbf962c3faaf610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:5f:90:5d:a7:ff:71:86:e2:73:e3:33:64:
cf:0d:71:c8:fe:91:21:33:98:f0:ff:63:43:9f:a7:
0c:89:74:11:ef:50:0f:69:7a:94:14:ac:6c:6b:3e:
82:d4:c9:d9:ab:7f:78:89:46:e0:3b:8a:cf:ed:19:
03:2b:c1:93:2e:a4:4e:2e:87:dc:b6:58:b4:42:de:
c3:df:42:56:dc:c5:56:3d:df:e9:bd:37:c0:81:d1:
e1:e7:07:3c:f1:b2:da:e8:29:1b:0f:23:3d:73:0c:
39:31:3b:7a:ab:a0:fb:07:4a:e5:d6:12:1c:50:28:
9d:fa:6d:a9:51:a0:71:c7:48:5d:b0:e3:57:50:05:
64:47:35:2e:78:d6:33:15:71:cd:fe:e5:ba:77:8f:
db:21:ef:a1:f9:77:6f:a0:ac:22:fd:c9:90:85:2e:
26:01:ff:d0:42:f3:f2:c3:6d:65:df:c1:53:3b:66:
22:91:7e:39:11:3d:54:2d:b3:68:1a:bf:f5:e8:a2:
d2:01:65:34:df:18:7d:62:35:fe:0f:ac:95:71:90:
f5:65:7e:76:0f:e5:c5:c8:27:09:70:aa:61:6f:97:
6e:83:cf:8b:a9:8f:09:d4:f9:84:40:7d:a3:62:24:
96:8c:11:be:dd:67:62:df:bb:ae:89:87:0e:c3:5a:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:10:F1:65:F0:8C:A9:49:AA:CF:2C:CB:F9:62:C3:FA:AF:61:0F
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ac:0f:f6:1a:c3:16:b8:9a:39:4a:ca:57:15:ba:7c:ab:a0:
e2:d7:38:47:a7:9e:ce:64:08:44:03:b4:ed:ee:d7:ca:ad:78:
63:98:88:4c:76:fb:40:7f:66:d8:32:9a:60:b7:74:bb:65:c4:
92:87:65:8c:8e:4c:e4:ca:f2:28:af:6c:5e:81:29:c8:62:2f:
e5:82:54:e2:7f:0f:45:8c:db:85:0e:94:23:21:71:fb:e9:9b:
dd:79:22:55:8e:58:05:a6:9b:ec:98:57:08:72:d8:92:52:81:
f6:18:cf:b2:be:72:0d:78:10:24:08:02:f8:95:ca:c4:d8:be:
a1:01:13:f3:40:d1:58:2b:74:20:3b:84:6f:62:ee:89:d6:0e:
0e:bd:f9:b0:03:81:74:f3:33:84:e3:da:9b:d5:67:45:57:02:
21:93:ae:0f:f1:4a:b6:ae:72:7b:db:24:0f:1b:37:a9:f0:ad:
34:e2:61:e3:47:e0:76:e2:b6:fd:9b:21:df:6d:ba:ca:4e:aa:
c3:7a:9b:76:d9:2c:64:f9:2b:fe:d3:76:4f:78:66:a6:6e:98:
46:51:17:61:9d:af:b5:a0:76:96:79:e0:95:6a:dd:7c:59:78:
07:35:c2:24:16:d8:93:a3:ec:89:4e:e6:bc:ed:76:a2:4f:78:
67:04:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:52 2026 by rpki-client